6.5Orta
CVE-2025-9258Uniong|WebITR - Arbitrary File Reading through Path Traversal
Açıklama
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.
Zayıflık türü (CWE):
CWE-36
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- https://www.twcert.org.tw/tw/cp-132-10328-dbc35-1.html third-party-advisoryThird Party Advisory
- https://www.twcert.org.tw/en/cp-139-10329-a1c5d-2.html third-party-advisoryThird Party Advisory
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:uniong:webitr:*:*:*:*:*:*:*:*< 2_1_0_33